create proc sp_supplyquery
@str varchar(500)
as

declare @sql varchar(5000)
set @sql='select * from supply where '+@str
exec (@sql)

